CoreCVE
Back

MEDIUM

An open redirect vulnerability in GitLab EE/CE affecting all versions from 11.1 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows an attacker to redirect users to an arbitrary location if they trust the URL

Published Jul 1, 2022

Description

An open redirect vulnerability in GitLab EE/CE affecting all versions from 11.1 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows an attacker to redirect users to an arbitrary location if they trust the URL.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-601

Open Redirect

References (4)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner GitLab
Published Jul 1, 2022
Updated Aug 3, 2024
Reserved Jun 29, 2022
Link CVE-2022-2250

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2022-2250

Red Hat

No data

ENISA EUVD

Assigner GitLab
Published Jul 1, 2022
Updated Aug 3, 2024
Link EUVD-2022-34528

GitHub

No data